$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144120.roa File: AS144120.roa (raw, json) Hash identifier: 0qYpST3sbfY7coieFjS/Dx+oGYXH9qsZ7ryQ3mRL6Cw= Subject key identifier: 1A:11:DB:B1:8B:56:CF:28:15:0F:AC:E5:C6:50:75:70:D1:B0:81:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66A5F261A5E5A1FDCC18A44056A1D475D49CC581 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144120.roa Signing time: Wed 04 Mar 2026 06:15:02 +0000 ROA not before: Wed 04 Mar 2026 06:10:02 +0000 ROA not after: Wed 03 Mar 2027 06:15:02 +0000 asID: 144120 IP address blocks: 240a:a5be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a5:f2:61:a5:e5:a1:fd:cc:18:a4:40:56:a1:d4:75:d4:9c:c5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:02 2026 GMT Not After : Mar 3 06:15:02 2027 GMT Subject: CN=1A11DBB18B56CF28150FACE5C6507570D1B081C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:cc:af:73:df:90:df:0a:96:44:ee:e4:5f: ee:6e:62:c8:1d:7d:e4:52:6a:a0:10:47:5b:36:36: 4e:e2:64:a7:12:2e:ba:6b:b4:4c:66:87:a0:e3:fa: b8:02:f7:3f:3f:ea:25:aa:ad:82:ea:bb:15:d7:34: a7:ae:40:65:54:85:bf:7a:d5:3e:38:c6:0d:22:50: b2:cc:fe:a9:36:ba:02:9d:61:de:ab:08:2c:86:e5: 27:c9:b5:dc:2f:42:20:43:13:34:d1:43:62:c5:0a: d2:23:e7:62:c6:26:6e:18:75:c9:e6:bd:26:88:b2: 59:be:ad:18:27:be:65:c9:87:42:e3:5e:92:06:61: 7a:b6:27:19:5d:61:77:00:14:a9:de:12:40:2a:32: d2:44:8c:40:1e:10:ff:22:6e:31:9e:7a:dc:0d:d0: fd:bf:5d:a8:da:3f:52:42:0b:76:c3:5c:94:87:0a: 56:c6:a8:6e:bc:f1:84:18:01:6e:3d:ae:3f:50:06: a6:b7:1e:d9:72:b1:22:91:29:ea:a4:c7:10:5a:71: a8:de:19:d7:f6:ca:a4:c5:e4:88:46:2b:97:27:35: 35:65:8a:e6:52:bc:c6:51:64:24:fa:48:52:b7:1d: 42:d2:f7:4e:28:ec:ef:39:d6:4e:9e:9a:56:54:3c: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:DB:B1:8B:56:CF:28:15:0F:AC:E5:C6:50:75:70:D1:B0:81:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5be::/32 Signature Algorithm: sha256WithRSAEncryption 22:33:0d:d4:27:4b:ee:ba:e0:c6:42:c0:eb:e4:bc:c4:15:99: 2e:7d:e8:38:69:41:b2:4a:1a:25:64:59:be:dc:dc:f8:95:64: 74:24:c9:fe:7f:44:97:ba:f8:08:db:a7:01:f1:2f:09:d0:69: da:59:ca:b6:f2:fe:12:08:17:67:3a:51:3b:ea:06:86:38:69: 38:0e:91:8f:5b:a8:c8:1b:92:4d:17:de:ef:02:19:29:76:29: e9:ca:6a:32:58:ec:33:a3:84:88:1c:c6:a2:df:1f:6f:87:a2: c4:92:63:19:73:fc:58:4e:03:38:89:5e:d4:ab:7c:1c:72:91: aa:73:5c:51:d8:07:39:e4:77:73:3c:94:82:0d:45:41:39:4f: a8:d2:25:1d:a8:ed:70:57:e7:8c:41:15:dc:9a:7a:33:ab:8e: f4:db:7f:cb:fa:31:c1:46:b4:02:fe:83:fa:54:bf:60:cc:f8: be:1f:d5:59:0c:0a:85:57:7a:2a:d2:d4:71:9a:68:13:a0:f6: b1:ad:40:db:0f:4f:e8:64:3f:05:bc:59:b4:fa:03:3a:90:45: e0:b9:ff:78:26:62:09:57:cd:62:f7:8d:4a:12:2a:f1:9a:b3: 2e:32:fa:00:07:b5:cd:ba:1d:ed:d2:a4:c5:df:ae:df:fc:6a: 7f:60:ab:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZqXyYaXlof3MGKRAVqHUddScxYEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwMloX DTI3MDMwMzA2MTUwMlowMzExMC8GA1UEAxMoMUExMURCQjE4QjU2Q0YyODE1MEZB Q0U1QzY1MDc1NzBEMUIwODFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbszK9z35DfCpZE7uRf7m5iyB195FJqoBBHWzY2TuJkpxIuumu0TGaHoOP6 uAL3Pz/qJaqtguq7Fdc0p65AZVSFv3rVPjjGDSJQssz+qTa6Ap1h3qsILIblJ8m1 3C9CIEMTNNFDYsUK0iPnYsYmbhh1yea9JoiyWb6tGCe+ZcmHQuNekgZherYnGV1h dwAUqd4SQCoy0kSMQB4Q/yJuMZ563A3Q/b9dqNo/UkILdsNclIcKVsaobrzxhBgB bj2uP1AGprce2XKxIpEp6qTHEFpxqN4Z1/bKpMXkiEYrlyc1NWWK5lK8xlFkJPpI UrcdQtL3Tijs7znWTp6aVlQ8lRsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaEdux i1bPKBUPrOXGUHVw0bCBxDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pb4wDQYJKoZIhvcNAQELBQADggEBACIzDdQnS+664MZCwOvkvMQVmS596DhpQbJK GiVkWb7c3PiVZHQkyf5/RJe6+AjbpwHxLwnQadpZyrby/hIIF2c6UTvqBoY4aTgO kY9bqMgbkk0X3u8CGSl2KenKajJY7DOjhIgcxqLfH2+HosSSYxlz/FhOAziJXtSr fBxykapzXFHYBznkd3M8lIINRUE5T6jSJR2o7XBX54xBFdyaejOrjvTbf8v6McFG tAL+g/pUv2DM+L4f1VkMCoVXeirS1HGaaBOg9rGtQNsPT+hkPwW8WbT6AzqQReC5 /3gmYglXzWL3jUoSKvGasy4y+gAHtc26He3SpMXfrt/8an9gq4s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:37 2026 by rpki-client